Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
File: 94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json)
Hash identifier: ErzcIVQ627/Mw1VfcXGDJUCr72G9LgjyiLXihoFJ5J8=
Subject key identifier: C5:62:76:34:5A:A6:F0:F1:5D:62:A6:A7:B3:70:31:BF:1E:2C:34:7D
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial: 019FA33C57DDCC4CF866487A1A487DC34E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
Manifest number: 12B8
Signing time: Mon 27 Jul 2026 11:01:08 +0000
Manifest this update: Mon 27 Jul 2026 11:01:08 +0000
Manifest next update: Tue 28 Jul 2026 11:01:08 +0000
Files and hashes: 1: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: CougWDkPlWgxCIK/s8X71eq3g1oJFb2szO6MT4oppiM=)
2: hKeFeFo6493_38OQ9i00adzif9I.roa (hash: 53uE5bZj+EC0/O49ny+JkcCWuYcfpKEUEDdPY2U5sKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:57:dd:cc:4c:f8:66:48:7a:1a:48:7d:c3:4e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Validity
Not Before: Jul 27 11:01:08 2026 GMT
Not After : Jul 28 11:01:08 2026 GMT
Subject: CN=c56276345aa6f0f15d62a6a7b37031bf1e2c347d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:74:a1:5c:db:64:ff:b0:23:d2:0f:1d:12:
1d:9a:45:73:fe:1d:20:7d:ee:28:c6:08:1c:10:5c:
09:fe:c0:ea:61:85:4e:bc:1c:2b:21:62:90:4f:b1:
9f:78:0e:df:74:8f:3c:c8:e7:78:94:36:8a:f0:ac:
36:e1:08:f0:2f:57:c1:90:f4:87:65:7f:32:ff:3b:
1b:a6:3f:63:7f:80:aa:02:af:5a:2f:0c:cf:3f:6c:
b0:12:09:5b:11:90:09:c0:35:5b:30:7b:f7:c0:ac:
62:fe:10:b9:bc:ac:85:b9:8a:ef:18:76:f7:c9:9d:
c6:4b:3b:0d:11:3d:c7:4d:31:79:94:d1:b1:a4:e5:
fd:25:5a:71:c5:c4:f6:2c:a1:7c:54:a6:0e:b0:c4:
3f:a6:d6:56:2c:53:91:ea:8a:0e:46:ba:69:40:b2:
6e:89:95:2f:6d:54:e8:4f:45:8f:5f:26:cd:f1:76:
5c:f6:02:62:27:14:9c:fc:39:49:ea:2c:52:c9:58:
e9:81:0b:08:96:b1:fc:08:3c:64:cb:4a:d1:34:6b:
ea:c7:67:d8:04:5e:7b:40:3e:26:cb:75:3a:5a:f7:
33:43:63:aa:c9:cf:aa:ce:6a:14:d5:24:d6:35:4f:
5c:ba:5c:2a:aa:a3:5a:8c:50:80:f1:99:ef:f8:eb:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:62:76:34:5A:A6:F0:F1:5D:62:A6:A7:B3:70:31:BF:1E:2C:34:7D
X509v3 Authority Key Identifier:
keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:17:e6:c4:90:00:3b:ce:e8:97:3d:b2:84:17:0a:6a:fd:ba:
28:cb:e7:41:68:92:50:74:ff:98:01:83:25:e4:c2:f7:12:5e:
3a:95:11:d3:60:b7:8e:22:66:64:b2:a1:23:53:e8:ea:0f:51:
72:3d:ec:35:de:bd:2b:5d:2c:8b:05:9e:36:99:14:1c:40:ce:
b2:11:51:f2:30:53:31:38:29:0f:95:23:6f:79:0d:43:4e:ef:
34:c9:d7:77:cd:bc:e0:33:62:27:47:24:c5:e4:df:3a:62:f0:
b9:17:04:58:11:b9:1f:1e:84:5a:fb:df:79:cb:bb:bf:38:c6:
71:1f:7b:25:a5:df:a3:88:08:e1:1c:99:54:22:7a:6a:b3:45:
bf:54:9a:0d:2e:ac:55:9f:6f:9c:cf:40:77:5d:dd:88:d5:8e:
30:38:74:5e:8d:ff:31:aa:83:32:f3:77:31:fd:9d:cb:21:9c:
4f:c9:42:f8:de:25:65:15:37:52:f5:78:e3:17:11:52:f9:a4:
63:98:a4:9a:f2:66:cb:16:1b:4d:51:f6:b8:68:0e:77:59:29:
fc:ae:52:6c:72:4c:37:32:f2:f1:b0:5c:eb:7c:60:ca:47:0a:
c5:fb:53:c4:6e:8c:71:c4:2e:bf:0d:32:7b:2f:ce:b3:5e:35:
fc:28:dd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:49:21 2026 by rpki-client